Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

IDS Sensor reporting and CSPM

1. If a sensor such as the IDS-42xx or IOS-IDS is configured to report to a HP OV NNM, is additional software required on the HP OV to understand the

messages, as the sensors communicate to the director through a proprietary Post Office protocol. Or, is it through SNMP traps ?

2. What is the difference between a Policy Manager client and a Policy Manager server - This distinction is noted in the quick reference guide for Operating System support

3. Does the CSPM by default put up a pop-up window when a sensor sends an alarm ?

1 REPLY
Cisco Employee

Re: IDS Sensor reporting and CSPM

1. If a sensor such as the IDS-42xx or IOS-IDS is configured to report to a HP OV NNM, is additional software required on the HP OV to sessages, as the sensors communicate to the director through a proprietary Post Office protocol. Or, is it through SNMP traps ?

IDS software is required (Unix Director). The IDS software can be configured to generate SNMP traps

2. What is the difference between a Policy Manager client and a Policy Manager server - This distinction is noted in the quick reference guide for Operating System support

A) CSPM can be installed in either Standalone, Client Server, or Distribution mode. The PM client is the client software required on a system that will remotely manage the PM server. The PM client is actually referenced as the Policy Administrator feature. The PM server (Policy Server), which includes the client, is the server portion.

3. Does the CSPM by default put up a pop-up window when a sensor sends an alarm ?

A) CSPM has an Event Viewer that is used to view IDS alarms. You will have to launch the EV from the Tools Menu (Tools>View Sensor Events>Database). The alarms will display in real-time when they are received.

105
Views
0
Helpful
1
Replies
CreatePlease to create content